Jitter Bugslec
- 1. Operating System What Can We Do?
- 3. JitterBugs Attached to a keyboard -- could be a new security threat? Piggyback onto network connections to discreetly send passwords and other sensitive data over the Internet
- 4. How does this work? By causing calculated "jitters" in keyboard input while such a program is running, a JitterBug could slightly delay data sent over the network. Certain amounts of delay could represent a one or a zero in each packet that is linked to keyboard use, allowing an attacker to send secret information in otherwise innocuous data without modifying software or initiating any new connections.
- 5. What Can We Do? Get rid of keyboards?
- 6. Stealing data with iPods Hi-tech thieves are using iPods to download data Blackberries, mobile phones with in-built storage, data pens and memory sticks that fit onto a key ring can be surreptitiously plugged into a computer port and used to steal bank account details, insurance information or even medical records.
- 7. Points Industry analyst Gartner says 70 per cent of security losses are as a result of insider activity. Protiviti says computer-based crime costs UK businesses up to $540,000 an hour, or an average of more than $1100 a business per year.
- 8. iPod Bad? An iPod can easily be configured to behave like a regular hard disk, which is capable of stealing confidential data quickly. ‘ Podslurping' – Using an iPod to copy corporate data without permission
- 9. What Can We DO? 'lock down' ports to stop unwanted peripherals downloading data? ban iPods and other data-downloading equipment?
- 10. P2P ( Peer to Peer) P2P Users Beware -- Your Personal Info Could Be Out There Medical records, financial information and router passwords have all popped up on P2P network file shares
- 11. What Can We Do? Just say no?
- 12. IT Managers Ignore Removable Media Risk The survey, of 248 IT professionals who had attended the Infosecurity Europe 2006 conference in London A survey conducted by the Mobile Security Company, revealed that 56% of employees downloaded corporate information onto their memory sticks, up from 31% last year
- 13. Things to think on The most popular use of the memory sticks was the storage of corporate data such as contracts, proposals and other business documents Only 21% secured flashdrives with passwords and encryption 12% of organizations banned them completely from the workplace
- 14. Things to think on Removable media is plummeting in price, have soaring memory capacities, and more people are using them at work
- 15. What Are We to Do? Companies need to be educated about using them securely Ban their use?
- 16. Trojan horses steal bank details and passwords Banks in the United Kingdom, Germany and Spain have been targeted by MetaFisher, otherwise known as Spy-Agent and PWS. After infecting a computer, the Trojan horse waits until the user visits a legitimate bank Web site, and then injects malicious HTML into certain fields there.
- 17. Points What is a Trojan Horse? The attackers attempt to place the Trojan on a computer using an exploit for the Windows Meta File flaw in Microsoft's Internet Explorer The potential victim must visit a malicious Web site to infect their system, and attackers may use e-mails to direct them there.
- 18. What Do We Do? Don’t allow users to download executable programs?